.conf Go Zurich 2022 - Platform Session
0 likes177 views
This document summarizes a presentation about Splunk's platform. It discusses Splunk's mission of helping customers create value faster with insights from their data. It provides statistics on Splunk's daily ingest and users. It highlights examples of how Splunk has helped customers in areas like internet messaging and convergent services. It also discusses upcoming challenges and new capabilities in Splunk like federated search, flexible indexing, ingest actions, improved data onboarding and management, and increased platform resilience and security.
Ad
More Related Content
What's hot (20)
Similar to .conf Go Zurich 2022 - Platform Session (20)
Ad
More from Splunk (20)
Ad
Recently uploaded (20)
.conf Go Zurich 2022 - Platform Session
- 1. © 2022 SPLUNK INC. Platform Session .conf Go Zurich - October 4th
- 2. .conf Go Zurich Markus Wuethrich, VP Product Management Shared Enabling & Platform Services 4. October 2022
- 3. Agenda .conf Go Zurich | 4. October 2022 | Markus Wuethrich | C1 Public 1. Our Mission 2. Platform Insights 3. Usecase Example 4. Evolution 3
- 4. We help you create value faster! .conf Go Zurich | 4. October 2022 | Markus Wuethrich | C1 Public 4
- 5. .conf Go Zurich | 4. October 2022 | Markus Wuethrich | C1 Public Facts & Figures 9 TB Daily Ingest 5 Awesome Engineers Daily Active Users 1700 2 Mio Daily Searches 371 Onboarded Services @Swissc om 5
- 6. .conf Go Zurich | 4. October 2022 | Markus Wuethrich | C1 Public Platform Insights Mgmt Hosts IDX Cluster SH Clusters HF 96 3+ 8 90 UF 13 k HEC + Syslog X0 k 6
- 7. .conf Go Zurich | 4. October 2022 | Markus Wuethrich | C1 Public Internet Messaging Securing and protecting the Bluewin Mail platform • key service for abuse management • near real time operating figures for business • improved support workflow • Fully automated barring process for compromised mail accounts • Reduced team load for repetitive tasks by factor 12x 7
- 8. .conf Go Zurich | 4. October 2022 | Markus Wuethrich | C1 Public Convergent Services Unlocking data-driven Operational Intelligence • Reduce efforts of 100h weekly for troubleshooting to 1h/week • Improved MTTR by factor 3 • Introduced pattern recognition and business reporting 8
- 9. Our Impact For Swisscom Reduce operation al efforts Proactiv e issue resolution Reduce testing efforts Prevent outages Improve MTTx Increase customer experienc e .conf Go Zurich | 4. October 2022 | Markus Wuethrich | C1 Public 9
- 12. © 2022 SPLUNK INC. Platform Session .conf Go Zurich - October 4th
- 13. © 2022 SPLUNK INC. Speakers Beni Ledermann Solution Engineer Dieter Kuich Solution Engineer
- 14. This presentation may contain forward-looking statements regarding future events, plans or the expected financial performance of our company, including our expectations regarding our products, technology, strategy, customers, markets, acquisitions and investments. These statements reflect management’s current expectations, estimates and assumptions based on the information currently available to us. These forward-looking statements are not guarantees of future performance and involve significant risks, uncertainties and other factors that may cause our actual results, performance or achievements to be materially different from results, performance or achievements expressed or implied by the forward-looking statements contained in this presentation. For additional information about factors that could cause actual results to differ materially from those described in the forward-looking statements made in this presentation, please refer to our periodic reports and other filings with the SEC, including the risk factors identified in our most recent quarterly reports on Form 10-Q and annual reports on Form 10-K, copies of which may be obtained by visiting the Splunk Investor Relations website at www.investors.splunk.com or the SEC's website at www.sec.gov. The forward-looking statements made in this presentation are made as of the time and date of this presentation. If reviewed after the initial presentation, even if made available by us, on our website or otherwise, it may not contain current or accurate information. We disclaim any obligation to update or revise any forward-looking statement based on new information, future events or otherwise, except as required by applicable law. In addition, any information about our roadmap outlines our general product direction and is subject to change at any time without notice. It is for informational purposes only and shall not be incorporated into any contract or other commitment. We undertake no obligation either to develop the features or functionalities described, in beta or in preview (used interchangeably), or to include any such feature or functionality in a future release. Splunk, Splunk> and Turn Data Into Doing are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names or trademarks belong to their respective owners. © 2022 Splunk Inc. All rights reserved. Forward- Looking Statements 2.18.22-19:04
- 15. © 2022 SPLUNK INC. Today’s landscape is unpredictable and complex
- 16. © 2022 SPLUNK INC. Business Imperative You want to compete on data, not drown in it
- 17. © 2022 SPLUNK INC. Splunk Enterprise 9.0 Splunk Cloud Platform Releasing every 4-6 weeks Announcing The Unified Security and Observability Platform
- 18. © 2022 SPLUNK INC. Splunk Offers Hybrid Platform Delivery and Different Subscription Models Splunk Cloud Platform New features from daily to 4-6 weeks Splunk Enterprise Platform Major releases 1-2x per year Workload Based Pricing Ingest- Based Pricing on-premise & BYOL
- 19. © 2022 SPLUNK INC. Search it all with Federated Search Reach across Environments New intuitive search experience across Splunk environments ● Cloud to Cloud ● On-Premises to Cloud ● On-Premises to On-Premises Splunk Cloud Federated Search Head Remote Cloud Deployment (same or different region) Splunk On-prem Federated Search Head Remote On-prem Deployment Federated Search
- 20. © 2022 SPLUNK INC. Flex Index Not all data is the same! Data has different value and applications Optimize for Cost Effective Storage & Search Standard Index Search 2 Monitoring Search 1 Data Exploration BFIDX + compressed file storage TSIDX + compressed file storage Data for Forensic Investigation Data for Monitoring vs Bring your data for exploration & forensic investigation into a Flex Index Preview Splunk Cloud Platform Splunk SmartStore on Microsoft Azure Increased flexibility for your on-prem environment ● Scale compute and storage independently ● Lower TCO with reduced indexer footprint ● Leverage cost benefits of cloud/storage innovations GA Splunk Enterprise 9.0
- 21. © 2022 SPLUNK INC. Ingest Actions Mask
- 22. © 2022 SPLUNK INC. Ingest Actions Filter & Route
- 23. © 2022 SPLUNK INC. Data Manager Easier Data Onboarding and Management ● Configure data onboarding in minutes with a modern user experience and data source specific best practices ● Centralized data management to create, manage, monitor and troubleshoot data configurations in one place Splunk Cloud Platform
- 24. © 2022 SPLUNK INC. Access More Data Sources New Data Sources, New Data Onboarding Experiences ○ Onboard AWS data in minutes with the new Data Manager ○ Splunk Add-on for Google Workspaces (G Suite/GWS) ○ Splunk Add-on CrowdStrike FDR, Cisco Meraki ○ Enhanced Content/CIM mappings for more than 15 Add-ons ○ Agent Unification: OTEL-based Splunk Connect for Kubernetes ○ Splunk Add-on for Jira Cloud ○ Splunk Add-on for Jira Data Center ○ Splunk Add-on for GitHub ○ Helix via Splunk Add-on for BMC Remedy ○ Box Shield via Splunk Add-on for Box ○ Snowflake via Splunk DB Connect Collaboration Security Cloud Data Collection Open Standards-Based Cloud Data Sources Security IT Ops IT Splunk Enterprise 9.0, Splunk Cloud Platform
- 25. © 2022 SPLUNK INC. Admin Config Service API Interface Control plane for Splunk Cloud Platform Configuration Changes ● IP Allow List ● HTTP Event Collector (HEC) ● Private Apps ● Public Apps Splunk Cloud Platform
- 26. © 2022 SPLUNK INC. Splunk Assist Splunk Assist is a cloud- connected service for Splunk Enterprise that puts your telemetry data to work! Splunk Assist provides you a single place to monitor your deployment and see recommendations to improve your security posture.
- 27. © 2022 SPLUNK INC. Increased Platform Resilience, Performance and Security ➔ Improved system uptime with Multi Site Cluster Manager Redundancy ➔ Role-based field filtering (preview) ➔ 9.0 now ships with an enhanced set of security settings including ➔ Subscribe to our Product Security Page to get timely updates on all advisories https://www.splunk.com/en_us/product-security.html Improving Efficiency and Management Splunk Enterprise 9.0, Splunk Cloud Platform
- 28. © 2022 SPLUNK INC. Splunk Operator for Kubernetes 2.0 ● Easily deploy, manage, and scale Splunk on your choice of cloud environment (internal or public with BYOL) with automated deployment and streamlined administration ● Remember, operator is just the automation of Splunk deployments on the latest technology ● Integrate Splunk in a CI/CD environment Splunk Enterprise 9.0 Run Splunk on Private or Public Cloud (BYOL)
- 29. © 2022 SPLUNK INC. Splunk App for Chargeback Understand Splunk usage by Business Unit & Department
- 30. © 2022 SPLUNK INC. Dashboard Studio Business Service Insights
- 31. © 2022 SPLUNK INC. Wrap-Up ● Splunk Platform = Flexibility = Choice ● Bookmark and Check out .conf online: https://conf.splunk.com/watch/conf-online.html ● Stay up to date with… Splunk Lantern (lantern.splunk.com) How-to article covers things you should know, tips and best practices about Splunk Enterprise Upgrades. Splunk Community (community.splunk.com) Continue the discussion about Splunk Enterprise upgrades, get your questions answered and connect with peers.
- 32. © 2022 SPLUNK INC. Thank You!